Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/z0pm9q0mQwgDqSjtmxo8jlOiyGk.roa
File: z0pm9q0mQwgDqSjtmxo8jlOiyGk.roa (raw, json)
Hash identifier: bPgT2eSpNgHxBR/u9s+wnbHSQJuLUdtMJbvfGq8gWYM=
Subject key identifier: CF:4A:66:F6:AD:26:43:08:03:A9:28:ED:9B:1A:3C:8E:53:A2:C8:69
Certificate issuer: /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial: 0193BB0AB9EE56A7CD61E9435F38DDC46093
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/z0pm9q0mQwgDqSjtmxo8jlOiyGk.roa
Signing time: Thu 12 Dec 2024 13:24:22 +0000
ROA not before: Thu 12 Dec 2024 13:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31225
IP address blocks: 83.219.224.0/19 maxlen: 19
83.219.224.0/22 maxlen: 22
83.219.225.0/24 maxlen: 24
83.219.226.0/24 maxlen: 24
83.219.227.0/24 maxlen: 24
83.219.228.0/24 maxlen: 24
83.219.229.0/24 maxlen: 24
83.219.230.0/24 maxlen: 24
83.219.231.0/24 maxlen: 24
83.219.232.0/24 maxlen: 24
83.219.233.0/24 maxlen: 24
83.219.234.0/24 maxlen: 24
83.219.235.0/24 maxlen: 24
83.219.236.0/24 maxlen: 24
83.219.237.0/24 maxlen: 24
83.219.238.0/24 maxlen: 24
83.219.239.0/24 maxlen: 24
83.219.240.0/24 maxlen: 24
83.219.241.0/24 maxlen: 24
83.219.242.0/24 maxlen: 24
83.219.244.0/24 maxlen: 24
83.219.246.0/24 maxlen: 24
83.219.247.0/24 maxlen: 24
83.219.248.0/24 maxlen: 24
83.219.249.0/24 maxlen: 24
83.219.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:0a:b9:ee:56:a7:cd:61:e9:43:5f:38:dd:c4:60:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Validity
Not Before: Dec 12 13:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf4a66f6ad26430803a928ed9b1a3c8e53a2c869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:7e:12:88:05:c7:86:09:95:37:b8:90:d2:
ea:3d:33:9c:0f:82:e4:0e:3e:0c:7b:bc:5b:68:6e:
a4:84:2a:2c:e6:5b:6f:89:58:ec:31:c1:a4:7f:81:
4c:e3:9c:e7:54:e4:85:84:7a:23:2b:aa:5e:b0:3c:
4f:52:16:b4:4f:cb:85:d2:e6:fd:3f:ec:ee:3c:32:
87:56:ef:de:2b:2c:53:af:f6:50:5e:5f:6e:49:c4:
79:eb:56:62:24:75:a4:69:c1:fa:52:55:2b:5a:bd:
42:7d:e0:8a:37:24:8f:39:6f:48:cc:a5:c5:b9:6a:
ab:13:09:68:ac:da:50:68:b0:3b:76:3f:df:78:f7:
3e:41:33:20:81:8a:eb:d1:d2:3a:18:28:f0:93:48:
ba:4c:ef:22:12:15:8f:16:99:22:8f:44:8a:34:5d:
f4:52:e2:73:b3:9a:34:45:d7:57:31:99:45:2f:02:
f8:1e:84:33:a6:8c:72:06:bc:13:22:f4:0a:c8:bc:
3f:79:de:5d:78:cf:2d:9b:d1:28:b1:d6:a2:d1:3a:
03:3d:6d:48:2a:f6:a2:99:e5:12:1e:d0:fc:20:0c:
35:c8:5f:ad:6a:31:53:e3:0b:19:75:79:44:fb:c0:
e9:89:09:8d:81:40:ab:af:39:9e:f4:e0:47:39:f0:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4A:66:F6:AD:26:43:08:03:A9:28:ED:9B:1A:3C:8E:53:A2:C8:69
X509v3 Authority Key Identifier:
keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/z0pm9q0mQwgDqSjtmxo8jlOiyGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.224.0/19
Signature Algorithm: sha256WithRSAEncryption
73:67:3c:e6:a3:62:45:fc:14:e8:ea:ec:c7:ab:6f:78:4a:cd:
92:ff:19:e3:fd:5e:c7:8e:ef:81:d3:68:9e:0c:8c:20:b2:f1:
7b:83:67:39:92:94:58:17:39:2d:2b:a3:de:1b:f0:f0:d9:d2:
ea:5e:be:18:85:64:d8:d1:8b:c1:d6:7f:e8:12:49:80:87:14:
45:d4:9b:b2:04:4f:88:9f:b3:d8:8e:82:0b:60:17:df:35:a1:
0e:89:fd:4d:eb:c9:5e:85:59:52:e4:ec:e0:10:eb:0d:b8:64:
07:e3:61:9d:d1:7a:17:94:0f:55:02:95:a9:0e:fe:ae:fb:26:
0e:35:59:ce:d8:ab:0d:4a:d4:3e:80:4f:fc:b3:cd:7a:99:c9:
de:9a:68:5c:e6:bd:89:2b:60:36:b7:d5:ea:9a:03:b7:7d:76:
0f:d4:19:8d:5a:b4:d9:87:0b:ea:20:7e:47:9a:e7:2e:88:ab:
d8:a3:53:ce:b7:8f:c9:92:a1:b2:3e:af:02:cb:33:8b:e8:61:
59:3d:90:8e:e4:f4:10:0b:ad:b4:2e:44:b9:64:b8:48:ff:1a:
ca:70:aa:b0:5c:3d:0d:ef:9d:60:3f:8b:d6:4b:b6:f1:00:02:
8c:a8:40:ec:0f:0f:87:20:f6:c8:8b:9d:6b:97:e9:37:08:19:
70:35:8b:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO7CrnuVqfNYelDXzjdxGCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjZhNDliY2MxMGRlMzQwZTM5ZDIwM2Y1NjY1OGJkN2Q2
NDhkZGYwHhcNMjQxMjEyMTMyNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjRhNjZmNmFkMjY0MzA4MDNhOTI4ZWQ5YjFhM2M4ZTUzYTJjODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA139+EogFx4YJlTe4kNLqPTOcD4Lk
Dj4Me7xbaG6khCos5ltviVjsMcGkf4FM45znVOSFhHojK6pesDxPUha0T8uF0ub9
P+zuPDKHVu/eKyxTr/ZQXl9uScR561ZiJHWkacH6UlUrWr1CfeCKNySPOW9IzKXF
uWqrEwlorNpQaLA7dj/fePc+QTMggYrr0dI6GCjwk0i6TO8iEhWPFpkij0SKNF30
UuJzs5o0RddXMZlFLwL4HoQzpoxyBrwTIvQKyLw/ed5deM8tm9Eosdai0ToDPW1I
KvaimeUSHtD8IAw1yF+tajFT4wsZdXlE+8DpiQmNgUCrrzme9OBHOfBnGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM9KZvatJkMIA6ko7ZsaPI5ToshpMB8GA1UdIwQY
MBaAFLC2pJvMEN40DjnSA/VmWL19ZI3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xha204d1EzalFPT2RJRDlXWll2WDFramQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85Y2MzOWMtZGQ3Yi00ODkyLTk0YmYt
ZWU0NmFjMDE4NjAwLzEvejBwbTlxMG1Rd2dEcVNqdG14bzhqbE9peUdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85Y2MzOWMtZGQ3Yi00ODkyLTk0YmYtZWU0NmFjMDE4NjAw
LzEvc0xha204d1EzalFPT2RJRDlXWll2WDFramQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFU9vgMA0G
CSqGSIb3DQEBCwUAA4IBAQBzZzzmo2JF/BTo6uzHq294Ss2S/xnj/V7Hju+B02ie
DIwgsvF7g2c5kpRYFzktK6PeG/Dw2dLqXr4YhWTY0YvB1n/oEkmAhxRF1JuyBE+I
n7PYjoILYBffNaEOif1N68lehVlS5OzgEOsNuGQH42Gd0XoXlA9VApWpDv6u+yYO
NVnO2KsNStQ+gE/8s816mcnemmhc5r2JK2A2t9XqmgO3fXYP1BmNWrTZhwvqIH5H
mucuiKvYo1POt4/JkqGyPq8CyzOL6GFZPZCO5PQQC620LkS5ZLhI/xrKcKqwXD0N
751gP4vWS7bxAAKMqEDsDw+HIPbIi51rl+k3CBlwNYsk
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:55:52 2025 by rpki-client